security: add snyk job

Signed-off-by: Christian Kotzbauer <christian.kotzbauer@gmail.com>
ckotzbauer · Jan 10, 2021 · 00aaa56 · 00aaa56
1 parent a623347
commit 00aaa56
Showing 1 changed file with 25 additions and 0 deletions.
diff --git a/.github/workflows/update-snyk.yml b/.github/workflows/update-snyk.yml
@@ -0,0 +1,25 @@
+name: update-snyk
+
+on:
+  schedule:
+    - cron: "0 12 * * 1"
+  workflow_dispatch: {}
+
+jobs:
+  update-snyk:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v2
+      - name: Install Go
+        uses: actions/setup-go@v2
+        with:
+          go-version: '1.15.6'
+      - name: Setup Node
+        uses: actions/setup-node@v2.1.4
+        with:
+          node-version: '14'
+      - uses: snyk/actions/setup@master
+      - name: Snyk monitor
+        env:
+          SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
+        run: snyk monitor